CVE-2026-16848

HighCVSS 8.8

Published: 19/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Summary

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of shell metacharacters in DHCP options.

Risk Assessment

An attacker could execute commands on the system, potentially leading to compromise of data integrity and confidentiality.

Recommendation

Install security updates from IBM and consider filtering DHCP traffic.

Original NVD description (English source)

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of shell metacharacters in DHCP options.